-
Notifications
You must be signed in to change notification settings - Fork 0
/
article_modify.php
173 lines (168 loc) · 7.37 KB
/
article_modify.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
<?php
/**
* Created by PhpStorm.
* User: Administrator
* Date: 2017/1/5 0005
* Time: 13:50
*/
session_start();
//定义一个常量，用来授权调用includes里面的文件
define('XH','bee');
//定义个常量，用来指定本页的内容
define('SCRIPT','article_modify');
//引入公共文件
require dirname(__FILE__).'/includes/common.inc.php';//转换成硬路径，速度更快
//登录后才可以发帖
if(!isset($_COOKIE['username'])){
_location('发帖前，必须登录！','login.php');
}
//将修改后的数据写入数据库,在此处还需要判断一下权限
if(@$_GET['action'] == 'modify'){
if($_rows = _fetch_array("SELECT user_id FROM tb_user WHERE user_username='{$_COOKIE['username']}' LIMIT 1")) {
//为了防止cookie伪造，还要比对一下唯一标识符
_check_uni(@$_rows['user_uni'], @$_COOKIE['uniqid']);//此处的COOKIE中的唯一编码uniqid虽然是变量但是要全写，否则会出错
//开始修改数据
include ROOT_PATH."includes/check.func.php";
//接收帖子的内容
$_clean = array();
$_clean['id'] = $_POST['id'];
$_clean['type'] = $_POST['type'];
$_clean['title'] = _check_post_title($_POST['title'],2,40);
$_clean['content'] = _check_post_content($_POST['content'],10);
$_clean = _mysql_second_string($_clean);
//执行sql
_query("UPDATE tb_article SET a_type='{$_clean['type']}',
a_title='{$_clean['title']}',
a_content='{$_clean['content']}',
a_last_modify_date=now()
WHERE
a_id='{$_clean['id']}'
");
if(_affected_rows() == 1){
//关闭数据库链接
_close();
// _session_destroy();
//成功写入数据库后，提示并跳转到指定的页面
_location('修改成功！','article.php?id='.$_clean['id']);
}else{
//关闭数据库链接
_close();
// _session_destroy();
//成功写入数据库后，提示并跳转到指定的页面
_alert_back('修改失败！');
}
}else{
_alert_back("非法登录!!!");
}
}
//读取数据
if(isset($_GET['id'])){
if($_rows = _fetch_array("SELECT a_username,a_title,a_type,a_content FROM tb_article WHERE a_reid=0 AND a_id='{$_GET['id']}'")){
//存在
$_html = array();
$_html['id'] = $_GET['id'];
$_html['type'] = $_rows['a_type'];
$_html['username'] = $_rows['a_username'];
$_html['title'] = $_rows['a_title'];
$_html['content'] = $_rows['a_content'];
$_html = _html($_html);
//判断权限
if(!isset($_SESSION['admin'])){
if($_COOKIE['username'] != $_html['username']){
_alert_back('你没有修改的权限！');
}
}
}else{
_alert_back("不存在此条信息！");
}
}else{
_alert_back('非法操作！！！');
}
////将帖子写入数据库
//if(@$_GET['action'] == 'post'){
// //验证码验证
// _check_code($_SESSION['code'],$_POST['yzm']);
// if($_rows = _fetch_array("SELECT user_id FROM tb_user WHERE user_username='{$_COOKIE['username']}' LIMIT 1")) {
// //为了防止cookie伪造，还要比对一下唯一标识符
// _check_uni(@$_rows['user_uni'], @$_COOKIE['uniqid']);//此处的COOKIE中的唯一编码uniqid虽然是变量但是要全写，否则会出错
// include ROOT_PATH."includes/check.func.php";
// //接收帖子的内容
// $_clean = array();
// $_clean['username'] = $_COOKIE['username'];
// $_clean['type'] = $_POST['type'];
// $_clean['title'] = _check_post_title($_POST['title'],2,40);
// $_clean['content'] = _check_post_content($_POST['content'],10);
// //$_clean['date'] = $_POST['date'];
// $_clean = _mysql_second_string($_clean);
// //写入数据库
// _query("INSERT INTO tb_article(a_username,a_title,a_type,a_content,a_date) VALUES('{$_clean['username']}','{$_clean['title']}','{$_clean['type']}','{$_clean['content']}',now())");
// if(_affected_rows() == 1){
// //获取刚刚新增的ID
// $_clean['id'] = _insert_id();
// //关闭数据库链接
// _close();
// _session_destroy();
// //成功写入数据库后，提示并跳转到指定的页面
// _location('帖子发表成功！','article.php?id='.$_clean['id']);
// }else{
// //关闭数据库链接
// _close();
// _session_destroy();
// //成功写入数据库后，提示并跳转到指定的页面
// _alert_back('帖子发表失败！');
// }
// }
//}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<!-- <title>多用户留言系统--修改帖子</title>-->
<?php
require ROOT_PATH."includes/title.inc.php"
?>
<script type="text/javascript" src="js/code.js"></script>
<script type="text/javascript" src="js/post.js"></script>
</head>
<body>
<?php
require ROOT_PATH.'includes/header.inc.php';
?>
<div id="post">
<h2>修改帖子</h2>
<form method="post" name="post" action="?action=modify">
<input type="hidden" value="<?php echo $_html['id']?>" name="id"/>
<dl>
<dt>请选择你要修改的内容</dt>
<dd>类 型：
<?php
foreach (range(1,16) as $_num){
if($_num == $_html['type']){
echo '<label for="type'.$_num.'"><input id="type'.$_num.'" type="radio" name="type" value="'.$_num.'" checked="checked"/> ';
}else{
echo '<label for="type'.$_num.'"><input id="type'.$_num.'" type="radio" name="type" value="'.$_num.'"/> ';
}
echo '<img src="images/icon'.$_num.'.png" alt="类型"/></label> ';
if($_num == 8){
echo "<br/> ";
}
}
?>
</dd>
<dd>标 题：<input type="text" name="title" value="<?php echo $_html['title'];?>" class="text"/>(*必填，2-40位)</dd>
<dd id="q">贴 图： <a href="javascript:;">Q图系列[1]</a> <a href="javascript:;">Q图系列[2]</a> <a href="javascript:;">Q图系列[3]</a></dd>
<dd>
<?php include ROOT_PATH.'includes/ubb.inc.php'?>
<textarea name="content" rows="15" cols=""><?php echo $_html['content'];?></textarea>
</dd>
<dd>验 证 码：<input type="text" name="yzm" class="text yzm"/><img id="code" src="code.php"/>
<input type="submit" class="submit" value="提交修改"/></dd>
</dl>
</form>
</div>
<?php
require ROOT_PATH.'includes/foot.inc.php';
?>
</body>
</html>